DriverAgent 2.2015.7.14, which includes DrvAgent64.sys 1.0.0.1, allows a user to send an IOCTL (0x80002068) with a user defined buffer size. If the size of the buffer is less than 512 bytes, then the driver will overwrite the next pool header if there is one next to the user buffer's pool.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2019-01-03T19:00:00
Updated: 2024-08-05T11:37:11.524Z
Reserved: 2018-11-25T00:00:00
Link: CVE-2018-19523
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2019-01-03T19:29:00.757
Modified: 2019-02-08T16:24:20.687
Link: CVE-2018-19523
Redhat
No data.